USN-3770-1: Little CMS vulnerabilities
Ibrahim El-Sayed discovered that Little CMS incorrectly handled certain files. An attacker could possibly use this issue to cause a denial of service. (CVE-2016-10165) Quang Nguyen discovered that Little CMS incorrectly handled certain files. An attacker could possibly use this issue to execute arbitrary code. (CVE-2018-16435)
Affected Software
Event History
Frequently Asked Questions
What is the severity of USN-3770-1?
The severity of USN-3770-1 is categorized as a potential denial of service vulnerability.
How do I fix USN-3770-1?
To fix USN-3770-1, upgrade your liblcms2-2 and liblcms2-utils packages to the recommended versions.
Which systems are affected by USN-3770-1?
USN-3770-1 affects Ubuntu versions 14.04, 16.04, and 18.04 that have specific versions of liblcms2.
What component is primarily affected by USN-3770-1?
The primary component affected by USN-3770-1 is the Little CMS library, specifically liblcms2.
Can USN-3770-1 lead to remote exploitation?
USN-3770-1 does not indicate remote exploitation capabilities; it is primarily a denial of service risk.